Senior Consultant - Exposure Management & Asset Visibility

Job description

We are delivering an enterprise exposure management and asset visibility capability for a major Australian client with a converged IT, OT and IoT estate. You will lead the technical design, deployment and operational handover of the platform, and turn raw asset discovery data into a risk picture the client’s security leadership can act on. This is a hands-on delivery role with significant client exposure. You will work alongside the practice lead and a senior consultant, and you will be the technical authority on the engagement. What you’ll do Design and deploy an agentless asset discovery and exposure management platform across corporate IT, cloud, OT and unmanaged device estates Plan and execute safe active scanning in fragile environments, including production OT and legacy embedded systems, without operational disruption Build and tune asset fingerprinting, classification and ownership models across a large, heterogeneous estate Integrate discovery data with the client’s existing CMDB, vulnerability management, EDR and SIEM tooling via API Develop risk prioritisation logic, dashboards and executive reporting that map findings to NIST CSF, the Essential Eight and the client’s regulatory obligations Identify unmanaged, unagentable and end-of-life assets, and drive remediation plans with asset owners Validate network segmentation integrity and map attack paths across IT and OT boundaries Produce operational runbooks and transition the capability to the client’s BAU security team Seven or more years in cyber security, with at least three in asset visibility, exposure management or vulnerability management delivery Hands-on experience with one or more CAASM or asset intelligence platforms — for example Armis, Claroty xDome, Forescout, Nozomi Networks, Axonius, Sevco, JupiterOne, Lansweeper or Tenable OT Security Strong practical networking: TCP/IP, routing and switching, VLANs, network segmentation, and the ability to read a packet capture Working knowledge of OT and industrial protocols (Modbus, DNP3, BACnet, EtherNet/IP) and the operational sensitivities of scanning production control systems Experience integrating security tooling via REST APIs, with scripting in Python or PowerShell for data enrichment and reporting Familiarity with vulnerability management platforms such as Tenable, Qualys or Rapid7, and how asset context improves their output Ability to write clearly for both engineers and executives, and to hold your own in a room with a CISO Australian work rights; ability to obtain a Baseline or NV1 clearance is advantageous Nice to have Exposure to Purdue model architectures and IEC 62443 Prior consulting or systems integrator delivery experience Certifications such as GICSP, GRID, CISSP, OSCP, or vendor-specific asset platform accreditations Experience in regulated industries — utilities, telecommunications, financial services, or critical infrastructure under the SOCI Act Why NCS? This is a place for people who like to get stuck in, bring ideas to life and make things happen. You’ll work alongside experienced people who care about what they do, contribute to meaningful work and have the support to keep learning and grow your career. Whether you want to deepen your expertise, explore something new or take your career in a different direction, there’s room to make it your own. We value Adventure, Excellence, Integrity, Ownership and Unity — bringing curiosity, collaboration and accountability to the way we work with our clients and each other. Ready to make extraordinary happen? We’d love to hear from you. We celebrate diversity and inclusion We value the different perspectives, experiences and strengths our people bring. We’re committed to an inclusive workplace where everyone has the opportunity to contribute, grow and succeed, and to providing equal employment opportunities and reasonable adjustments throughout the recruitment process. Important information Applicants will need valid Australian work rights and may be required to undergo relevant background, probity and police checks. Agencies: NCS accepts candidate submissions only from agencies on our preferred supplier panel through the NCS Agency Portal. At NCS Australia, we believe in doing technology services better. Our commitment to quality, focus on people, and willingness to challenge traditional thinking set us apart. Our team brings this belief to life by partnering with our clients and communities to make tomorrow together. We are committed to creating an environment that prioritises innovation, collaboration, and purposeful work. Our diverse team is empowered to make a meaningful impact with curiosity, creativity and resilience to shape better outcomes. Join us and accept the challenge of creating a better tomorrow.